Releases: authzed/terraform-provider-authzed
Releases · authzed/terraform-provider-authzed
v0.6.0-beta1
Changelog
All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog,
and this project adheres to Semantic Versioning.
Added
- Concurrency testing suite - Performance benchmarking (15-75 resources), concurrent creation tests, and eventual consistency validation
- DeleteLanes infrastructure - Conflict resolution system for resource deletion with intelligent retry logic
- Per-Permission System serialization lanes (PSLanes) - Concurrent operations across different permission systems while preventing FGAM conflicts
- Enhanced troubleshooting documentation - Performance guidance with resource count thresholds and parallelism recommendations
Changed
- Client architecture refactor - Improved retry mechanisms, exponential backoff, and enhanced context handling
- Performance optimizations - Intelligent serialization, wait logic for eventual consistency, and significantly reduced execution time
- Resource creation flow - Better context handling to prevent timeout and deadline exceeded errors
- Performance recommendations - Default parallelism for ≤8 resources; use
parallelism=1for >8 mixed resources, >5 service accounts, or >50 total resources - HTTP compression disabled by default - Ensures ETag visibility behind proxies
- Updated dependencies - golang.org/x/sync v0.17.0, terraform-plugin-framework v1.16.0, terraform-plugin-framework-timeouts v0.6.0
Fixed
- FGAM field drift - Resolved
updated_at/updaterdrift with proper UseStateForUnknown plan modifiers - Context deadline errors - Fixed timeout issues in policy/role creation
- Resource deletion conflicts - Enhanced conflict handling with DeleteLanes
- Service account state consistency - Resolved disappearing resources due to eventual consistency
- FGAM conflicts - PSLanes prevent 409 errors within same Permission System
- Plan modifier inconsistencies - Fixed "Provider produced inconsistent result after apply" errors
- ETag header extraction - Fixed issues with compressed responses
- Test suite stability - Removed merge conflict markers breaking CI
Removed
- Obsolete FGAM serialization configuration - Removed deprecated
fgam_serializationprovider option and related documentation (replaced by more sophisticated PSLanes system) - Legacy API implementation - Cleaned up unused internal/api code after client optimizations and refactoring
[0.4.1] - 2025-01-08 [YANKED]
Fixed
- Ensures consistent behavior across all resources and eliminates plan inconsistencies for policy updates
Note: This version has been yanked due to incomplete plan modifier configuration. Use v0.5.0+ instead.
[0.4.0] - 2025-01-08
Added
- Native FGAM (Fine-Grained Access Management) field support for all resources
- New
updated_atandupdaterfields for Service Accounts, Roles, Policies, and Tokens - Enhanced retry logic with support for 429 (Rate Limit) status codes
- Improved concurrent operation handling with increased retry limits
Fixed
- CRITICAL: Resolved "Provider produced inconsistent result after apply" errors caused by etag inconsistencies
- Fixed etag handling by removing incorrect UseStateForUnknown() plan modifiers from etag fields
- Ensured etag values always come from API responses for consistent state management
Changed
- Removed provider-side FGAM patches and locking mechanisms in favor of native API support
- Updated OpenAPI spec integration to use latest API fixes
Removed
- Provider-side FGAM coordinators and serialization logic (replaced by native API support)
0.1.0 - 2023-08-15
Added
- Initial release of the Terraform Provider for AuthZed Cloud API
- Support for managing Permission Systems
- Support for managing Roles and Permissions
- Support for managing Service Accounts
- Support for managing Tokens
- Support for managing Policies
- Documentation and examples
v0.5.0
v0.4.1
v0.4.0
v0.3.1
v0.3.0
Changelog
Features
- 549cefb feat: add FGAM serialization and enhanced retry diagnostics
- 7b2e972 feat: enhance FGAM retry logic with exponential backoff for concurrent operations
- 3a41751 feat: include the rest of the resources
- 96d3e75 feat: support concurrency model for deletes
Documentation
- 9438c6c docs: add example for concurrent resources management